This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa
File: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (raw, json)
Hash identifier: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=
Subject key identifier: D3:E5:52:5F:16:54:3C:D1:3F:34:2C:91:61:8E:1A:3A:49:EC:22:03
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019B79ED0F9BC6E953E4D71A742ADC43ABCF
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa
Signing time: Thu 01 Jan 2026 14:18:57 +0000
ROA not before: Thu 01 Jan 2026 14:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34611
IP address blocks: 185.242.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:0f:9b:c6:e9:53:e4:d7:1a:74:2a:dc:43:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 1 14:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e5525f16543cd13f342c91618e1a3a49ec2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:1a:e5:5e:b6:4e:ed:a0:3a:85:15:1c:78:
f3:75:7d:24:a3:54:7f:e1:4f:e5:98:b2:c5:b4:47:
f8:06:f1:fb:f6:3c:ea:20:27:6c:6a:65:ef:f9:7f:
3e:b5:7d:e7:55:14:fd:8e:dc:02:91:d7:0c:df:3c:
fc:17:57:1f:df:cf:a3:9f:46:5f:23:a4:af:9b:69:
ef:01:8d:7d:65:d6:91:95:65:2a:1b:87:9f:27:9b:
d3:b7:53:3f:3e:e7:b0:ab:b9:32:a2:a5:9c:b3:fe:
6e:4d:c2:bb:17:d6:5c:b3:7a:e7:fe:2a:87:7e:9e:
68:86:84:81:81:7f:9d:ff:56:23:27:40:74:86:df:
86:c0:3b:e1:42:6b:46:22:27:68:2f:d3:f3:fa:f5:
4f:68:2a:ef:6c:a5:ee:f1:9f:d4:8e:88:7b:47:d4:
cc:74:d0:af:a0:ff:6e:ec:72:b3:11:f9:d4:69:5b:
d7:ef:9b:3d:1c:15:0c:05:f2:34:88:32:b2:a5:74:
0e:3d:26:9c:bd:c3:2c:bf:66:4f:47:2a:79:c5:20:
7e:2c:15:da:a1:21:35:05:08:a9:02:9e:2b:6e:d3:
f6:dc:4e:97:ca:d1:6a:a0:46:53:43:e9:6b:4c:3e:
83:d2:0e:94:84:20:66:00:35:53:6f:e7:e0:85:4a:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:52:5F:16:54:3C:D1:3F:34:2C:91:61:8E:1A:3A:49:EC:22:03
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.44.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b7:62:03:d8:34:67:18:f1:80:6a:8b:a3:a3:5d:3a:be:59:
6e:5f:17:a6:88:00:48:59:d6:c3:8a:97:1c:8d:b6:8b:ae:93:
75:4f:5c:9e:52:4a:2b:ba:2d:13:7a:6f:e2:85:2c:eb:2e:70:
c9:d6:bc:c6:62:0d:1b:2c:1a:19:0b:50:8b:0f:65:1c:87:55:
12:b1:71:ea:7e:a9:e7:ba:63:49:fe:47:02:96:a6:ee:44:9e:
7f:9f:e4:61:26:f2:ec:34:0d:01:06:79:ed:95:d1:97:0a:09:
5b:98:76:e7:4d:b2:6a:ba:d6:67:0a:27:15:13:e4:b4:05:ad:
d5:6e:18:42:7a:29:ac:03:05:fd:d8:f5:d3:e4:1b:3c:9a:b0:
df:79:b2:9e:a9:97:00:c9:67:85:44:2d:6d:90:2a:d3:87:fa:
18:c7:ef:c2:5e:db:2c:07:93:90:7f:f7:3c:99:43:3f:14:f4:
11:7d:c3:10:94:dc:c7:5f:65:42:d4:96:2f:3c:bd:82:36:23:
43:94:16:b4:de:8b:0e:4e:22:9e:86:e8:99:07:74:b5:a3:aa:
44:17:25:99:ae:55:54:b5:a7:3e:4d:d9:6e:22:90:8c:33:26:
1b:fb:38:da:ba:7d:87:98:fe:ea:eb:ab:74:1a:0c:68:69:35:
46:31:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:56 2026 by rpki-client